Before you read this post please run git --version and if it’s not 2.14.1 or greater then please go upgrade it.
git --version
As a startup, where might your organization get the biggest bang for your buck when it comes to security?
Earlier this week Zach Grace published an article on one way that you could backdoor a Node.js Express application without touching disk. This jogged my memory of something I posted in our team’s chat this last week but never wrote about; how I would in…
Just before the New Years I published 140+ advisories on Node.js modules. I’ve been researching ways to compromise developers & node.js applications without compromising the npm registry or their CDN.
We are excited to announce that today ^Lift Security and &yet are donating the Node Security Project and its data to the Node Foundation.
I’m excited to announce that as of today Nicholas Starke has joined the ^Lift Security team.
Nick has an extensive development background, adept in many languages and platforms, which augments his experience auditing applications and embedded devices…
